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Office of the Attorney General 
Attorney General George Jepsen 
55 Elm Street 
Hartford, CT 06106 

Re: Notification of a Potential Breach of Security Involving Computerized Data Containing 

Personal /nformation Pursuant to Connecticut General Statutes § 36a-701b(b)(2) 

Dear Attorney General Jepsen: 

We represent Jay Zabel & Associates, Ltd. (“Zabel”) in connection with an incident that involved the 
personal information of three (3) Connecticut residents, and provide this notice on behalf of Zabel 
pursuant to Connecticut Gen. Statutes § 36a-701b(b)(2). This notice will be supplemented, if 
necessary, with any new significant facts discovered subsequent to its submission. While it is notifying 
you of this incident, Zabel does not waive any rights or defenses relating to the incident or this notice, 
or the applicability of Connecticut law on personal jurisdiction. 

Nature of the Security Breach or Unauthorized Use or Access 

Zabel is a law firm located in Chicago, Illinois. On January 3, 2018, Zabel learned that an email 
account was compromised in such a way that it is possible someone could have accessed the contents 
of the account. It discovered this as part of an investigation it undertook after the email account was 
used to send out phishing emails. 

Upon learning of the incident, Zabel terminated the email account credentials. It also retained a leading 
forensic security firm to investigate the situation. 

At this point, Zabel is not aware of any fraud or identity theft to any of its customers or other individuals 
and does not know if any information in the email accounts was ever reviewed by an unauthorized 
party. Nevertheless, because the email accounts were compromised, Zabel chose to notify all 
individuals whose information could have been in the account of the situation. Information in the email 
account included names, addresses and Social Security numbers. 

Number of Connecticut Residents Affected 

It was determined that three Connecticut residents (one family) may have been impacted by this 
incident. Zabel will be notifying impacted individuals of the situation by letter later today, February 5, 
2018. Enclosed is a copy of the notice that is being sent to the impacted individuals. 
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Steps Taken Relating to the Incident 

Upon learning of the incident, Zabel promptly remediated the situation and retained a forensic security 
firm to investigate. It is also providing free identity theft protection services to the impacted individuals 
through Experian. In addition, to lessen the likelihood of a future incident, Zabel is in the process of 
implementing a secure portal to which clients can upload sensitive data. 

Contact Information 

Please contact me if you have any questions or if I can provide you with any further information 
concerning this matter. 

Very truly yours, 



Michael J. Waters 
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